Quantum/FWaaS/IcehousePlan

Neutron FWaaS Havana

The following is the proposed plan/schedule for design and implementation of features for Firewall As A Service feature in OpenStack Networking for the Icehouse release. This lists the items which we discussed during the Icehouse summit.

Community Blueprints

You can find the actual dates for the milestones here

Task	Blueprint	Milestone
Tempest	https://blueprints.launchpad.net/tempest/+spec/fwaas-api-tempest	I1
Firewall Insertion	https://blueprints.launchpad.net/neutron/+spec/fwaas-service-insertion	I1
Service type framework integration	https://blueprints.launchpad.net/neutron/+spec/fwaas-service-types-integration	I1
Zones	https://blueprints.launchpad.net/neutron/+spec/fwaas-zones-api	I2
Address Objects	https://blueprints.launchpad.net/neutron/+spec/fwaas-address-objects	I2
Service objects and icmp types/codes	https://blueprints.launchpad.net/neutron/+spec/fwaas-customized-service	I2
Counters	https://blueprints.launchpad.net/neutron/+spec/fwaas-counters-api, https://blueprints.launchpad.net/neutron/+spec/firewall-hitcounts	?
Admin guide		I3
API doc		I3
Apply Operation for firewall API	https://blueprints.launchpad.net/neutron/+spec/neutron-fwaas-explicit-commit	?
Apply Operation for firewall CLI	https://blueprints.launchpad.net/python-neutronclient/+spec/fwaas-commit-operation	?
Heat		I3
Firewall Rules Blob	https://blueprints.launchpad.net/neutron/+spec/firewall-rules-blob	?
Cloning of rules/policies

Reference Implementation

This will continue to be the IPTables based implementation.

Firewall Mode

This will continue to be a perimeter firewall. However, insertion will be supported on a per router basis.

Vendor Blueprints

Task	Blueprint	Milestone

Bugs

Neutron

https://bugs.launchpad.net/neutron/+bugs?field.tag=fwaas

Neutron Client

https://bugs.launchpad.net/python-neutronclient/+bugs?field.tag=fwaas

Horizon

https://bugs.launchpad.net/horizon/+bugs?field.tag=fwaas

Heat

https://bugs.launchpad.net/heat/+bugs?field.tag=fwaas